Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: vendors Clear
ID Title
CVE-2019-25668 SQL Injection in sqli (CVE-2019-25668)
SQL injection in sqli (CVE-2019-25668). Confidential information can be exposed externally.
CVE-2019-25671 Path Traversal in c (CVE-2019-25671)
path traversal in c (CVE-2019-25671). Successful exploitation can lead to full system takeover.
CVE-2019-25662 SQL Injection in sqli (CVE-2019-25662)
SQL injection in sqli (CVE-2019-25662). Confidential information can be exposed externally.
CVE-2019-25664 SQL Injection in sqli (CVE-2019-25664)
SQL injection in sqli (CVE-2019-25664). Confidential information can be exposed externally.
CVE-2026-5580 Vulnerability in sqli (CVE-2026-5580)
vulnerability in sqli (CVE-2026-5580). Risk of unauthorized operations or information disclosure.
CVE-2026-5583 Vulnerability in sqli (CVE-2026-5583)
vulnerability in sqli (CVE-2026-5583). Risk of unauthorized operations or information disclosure.
CVE-2026-5579 Vulnerability in sqli (CVE-2026-5579)
vulnerability in sqli (CVE-2026-5579). Risk of unauthorized operations or information disclosure.
CVE-2026-5576 Vulnerability in CVE-2026-5576 (CVE-2026-5576)
vulnerability in CVE-2026-5576 (CVE-2026-5576). Risk of unauthorized operations or information disclosure.
CVE-2026-5578 Vulnerability in sqli (CVE-2026-5578)
vulnerability in sqli (CVE-2026-5578). Risk of unauthorized operations or information disclosure.
CVE-2026-5575 Vulnerability in sqli (CVE-2026-5575)
vulnerability in sqli (CVE-2026-5575). Risk of unauthorized operations or information disclosure.
CVE-2026-5567 Buffer Overflow in tenda (CVE-2026-5567)
vulnerability in tenda (CVE-2026-5567). Successful exploitation can lead to full system takeover.
CVE-2026-5565 Vulnerability in sqli (CVE-2026-5565)
vulnerability in sqli (CVE-2026-5565). Risk of unauthorized operations or information disclosure.
CVE-2026-5564 Vulnerability in sqli (CVE-2026-5564)
vulnerability in sqli (CVE-2026-5564). Risk of unauthorized operations or information disclosure.
CVE-2026-5560 Vulnerability in sqli (CVE-2026-5560)
vulnerability in sqli (CVE-2026-5560). Risk of unauthorized operations or information disclosure.
CVE-2026-5561 Vulnerability in CVE-2026-5561 (CVE-2026-5561)
vulnerability in CVE-2026-5561 (CVE-2026-5561). Risk of unauthorized operations or information disclosure.
CVE-2026-5555 Vulnerability in sqli (CVE-2026-5555)
vulnerability in sqli (CVE-2026-5555). Risk of unauthorized operations or information disclosure.
CVE-2026-5558 Vulnerability in sqli (CVE-2026-5558)
vulnerability in sqli (CVE-2026-5558). Risk of unauthorized operations or information disclosure.
CVE-2026-5554 Vulnerability in sqli (CVE-2026-5554)
vulnerability in sqli (CVE-2026-5554). Risk of unauthorized operations or information disclosure.
CVE-2026-5553 Vulnerability in sqli (CVE-2026-5553)
vulnerability in sqli (CVE-2026-5553). Risk of unauthorized operations or information disclosure.
CVE-2026-5552 Vulnerability in sqli (CVE-2026-5552)
vulnerability in sqli (CVE-2026-5552). Risk of unauthorized operations or information disclosure.
CVE-2026-5551 Vulnerability in sqli (CVE-2026-5551)
vulnerability in sqli (CVE-2026-5551). Risk of unauthorized operations or information disclosure.
CVE-2026-5550 A vulnerability was identified in Tenda AC10 16.03.10.10_multi_TDE01. This affects the function fromSysToolChangePwd of the file /bin/httpd. The manipulation leads to stack-based buffer overflow. The...
A vulnerability was identified in Tenda AC10 16.03.10.10_multi_TDE01. This affects the function fromSysToolChangePwd of the file /bin/httpd. The manipulation leads to stack-based buffer overflow. The attack may be initiated remotely. Multiple endpoints might be affected.
CVE-2026-5548 Buffer Overflow in tenda (CVE-2026-5548)
vulnerability in tenda (CVE-2026-5548). Successful exploitation can lead to full system takeover.
CVE-2026-5549 Vulnerability in tenda (CVE-2026-5549)
vulnerability in tenda (CVE-2026-5549). Risk of unauthorized operations or information disclosure.
CVE-2026-5547 Command Injection in tenda (CVE-2026-5547)
command injection in tenda (CVE-2026-5547). Risk of unauthorized operations or information disclosure.
CVE-2026-5546 Vulnerability in CVE-2026-5546 (CVE-2026-5546)
vulnerability in CVE-2026-5546 (CVE-2026-5546). Risk of unauthorized operations or information disclosure.
CVE-2026-5541 Cross-Site Scripting (XSS) in CVE-2026-5541 (CVE-2026-5541)
cross-site scripting in CVE-2026-5541 (CVE-2026-5541). Risk of unauthorized operations or information disclosure.
CVE-2026-5542 Cross-Site Scripting (XSS) in CVE-2026-5542 (CVE-2026-5542)
cross-site scripting in CVE-2026-5542 (CVE-2026-5542). Risk of unauthorized operations or information disclosure.
CVE-2026-5543 Vulnerability in sqli (CVE-2026-5543)
vulnerability in sqli (CVE-2026-5543). Risk of unauthorized operations or information disclosure.
CVE-2026-5540 Vulnerability in sqli (CVE-2026-5540)
vulnerability in sqli (CVE-2026-5540). Risk of unauthorized operations or information disclosure.
CVE-2026-5539 Cross-Site Scripting (XSS) in CVE-2026-5539 (CVE-2026-5539)
cross-site scripting in CVE-2026-5539 (CVE-2026-5539). Risk of unauthorized operations or information disclosure.
CVE-2026-5537 Vulnerability in c (CVE-2026-5537)
vulnerability in c (CVE-2026-5537). Risk of unauthorized operations or information disclosure.
CVE-2026-5535 Path Traversal in path-traversal (CVE-2026-5535)
path traversal in path-traversal (CVE-2026-5535). Risk of unauthorized operations or information disclosure.
CVE-2026-5534 Vulnerability in sqli (CVE-2026-5534)
vulnerability in sqli (CVE-2026-5534). Risk of unauthorized operations or information disclosure.
CVE-2026-5527 Vulnerability in tenda (CVE-2026-5527)
vulnerability in tenda (CVE-2026-5527). Risk of unauthorized operations or information disclosure.
CVE-2026-5526 Vulnerability in tenda (CVE-2026-5526)
vulnerability in tenda (CVE-2026-5526). Risk of unauthorized operations or information disclosure.
CVE-2018-25252 Out-of-Bounds Write in dos (CVE-2018-25252)
out-of-bounds write in dos (CVE-2018-25252). Risk of unauthorized operations or information disclosure.
CVE-2018-25248 Cross-Site Scripting (XSS) in mybb (CVE-2018-25248)
cross-site scripting in mybb (CVE-2018-25248). Risk of unauthorized operations or information disclosure.
CVE-2016-20052 Unrestricted File Upload in snewscms (CVE-2016-20052)
vulnerability in snewscms (CVE-2016-20052). Successful exploitation can lead to full system takeover.
CVE-2016-20050 Out-of-Bounds Write in dos (CVE-2016-20050)
out-of-bounds write in dos (CVE-2016-20050). Risk of unauthorized operations or information disclosure.
CVE-2026-2936 Cross-Site Scripting (XSS) in wordpress (CVE-2026-2936)
cross-site scripting in wordpress (CVE-2026-2936). Risk of unauthorized operations or information disclosure.
CVE-2026-3309 Code Injection in wordpress (CVE-2026-3309)
code injection in wordpress (CVE-2026-3309). Risk of unauthorized operations or information disclosure.
CVE-2026-3666 Path Traversal in wordpress (CVE-2026-3666)
path traversal in wordpress (CVE-2026-3666). Successful exploitation can lead to full system takeover.
CVE-2026-1233 The Text to Speech for WP (AI Voices by Mementor) plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.9.8. This is due to the plugin containing...
The Text to Speech for WP (AI Voices by Mementor) plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.9.8. This is due to the plugin containing hardcoded MySQL database credentials for the vendor's external telemetry server in the `Mementor_TT...
CVE-2026-0626 Cross-Site Scripting (XSS) in wordpress (CVE-2026-0626)
cross-site scripting in wordpress (CVE-2026-0626). Risk of unauthorized operations or information disclosure.
CVE-2025-14938 Unrestricted File Upload in wordpress (CVE-2025-14938)
vulnerability in wordpress (CVE-2025-14938). Risk of unauthorized operations or information disclosure.
CVE-2026-3445 The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to unauthorized membership payment bypass i...
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to unauthorized membership payment bypass in all versions up to, and including, 4.16.11. This is due to a missing ownership verification on the...
CVE-2026-2826 Vulnerability in wordpress (CVE-2026-2826)
vulnerability in wordpress (CVE-2026-2826). Risk of unauthorized operations or information disclosure. Exploitable via ``upload_files``.
CVE-2026-5425 Cross-Site Scripting (XSS) in wordpress (CVE-2026-5425)
cross-site scripting in wordpress (CVE-2026-5425). Risk of unauthorized operations or information disclosure.
CVE-2026-2437 Cross-Site Scripting (XSS) in wordpress (CVE-2026-2437)
cross-site scripting in wordpress (CVE-2026-2437). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →